Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lYxsH8_8Zv5MGKEQpp2qsr_5N4s.roa
File: lYxsH8_8Zv5MGKEQpp2qsr_5N4s.roa (raw, json)
Hash identifier: ysQ3fH7jFbHSLZc1W0VCad1aWcmLY09QMqW2F2gW4/g=
Subject key identifier: 95:8C:6C:1F:CF:FC:66:FE:4C:18:A1:10:A6:9D:AA:B2:BF:F9:37:8B
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01969A4710401B414C1138B4F73C181DB31D
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lYxsH8_8Zv5MGKEQpp2qsr_5N4s.roa
Signing time: Sun 04 May 2025 07:51:10 +0000
ROA not before: Sun 04 May 2025 07:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 31.56.113.0/24 maxlen: 24
31.56.154.0/24 maxlen: 24
31.56.158.0/24 maxlen: 24
31.56.159.0/24 maxlen: 24
31.56.168.0/24 maxlen: 24
31.56.169.0/24 maxlen: 24
31.56.170.0/24 maxlen: 24
31.56.171.0/24 maxlen: 24
31.56.174.0/24 maxlen: 24
31.56.175.0/24 maxlen: 24
31.57.24.0/22 maxlen: 24
31.57.28.0/22 maxlen: 24
31.57.48.0/22 maxlen: 24
31.57.52.0/22 maxlen: 24
31.57.56.0/22 maxlen: 24
31.57.60.0/22 maxlen: 24
31.57.105.0/24 maxlen: 24
31.57.106.0/24 maxlen: 24
31.57.107.0/24 maxlen: 24
31.57.108.0/24 maxlen: 24
31.57.109.0/24 maxlen: 24
31.58.34.0/23 maxlen: 24
31.58.212.0/22 maxlen: 24
217.60.0.0/21 maxlen: 24
217.60.0.0/24 maxlen: 24
217.60.1.0/24 maxlen: 24
217.60.2.0/24 maxlen: 24
217.60.4.0/24 maxlen: 24
217.60.5.0/24 maxlen: 24
217.60.6.0/24 maxlen: 24
217.60.12.0/22 maxlen: 24
217.60.12.0/24 maxlen: 24
217.60.13.0/24 maxlen: 24
217.60.14.0/24 maxlen: 24
217.60.24.0/22 maxlen: 24
217.60.36.0/22 maxlen: 24
217.60.56.0/24 maxlen: 24
217.60.57.0/24 maxlen: 24
217.60.58.0/24 maxlen: 24
217.60.59.0/24 maxlen: 24
217.60.60.0/22 maxlen: 24
217.60.60.0/24 maxlen: 24
217.60.61.0/24 maxlen: 24
217.60.62.0/24 maxlen: 24
217.60.63.0/24 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 17:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:47:10:40:1b:41:4c:11:38:b4:f7:3c:18:1d:b3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: May 4 07:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=958c6c1fcffc66fe4c18a110a69daab2bff9378b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:e7:8d:d5:8b:8c:c1:9e:b2:89:8d:8e:c1:
f2:bc:a3:a8:bc:b7:75:d6:11:43:d2:fe:87:a0:3f:
71:4a:6c:bb:dc:9b:a2:21:59:fc:e0:ef:0d:f0:93:
d8:84:9c:d3:76:fa:13:10:d8:ae:59:87:e2:33:c8:
82:31:4a:65:e6:19:9b:2a:62:00:a7:f4:e2:68:0b:
38:ee:dd:d1:57:8f:2f:85:d1:79:c4:32:c2:9e:6b:
9e:a7:f8:ca:a3:84:c5:73:e9:a6:8b:5d:aa:7b:7d:
47:a6:2b:be:3a:7c:82:7e:39:b7:e5:19:fb:0c:bc:
be:e3:f7:2e:cb:e1:34:ad:ca:ab:14:84:9e:3f:9b:
13:01:21:39:9d:7e:53:ca:83:35:56:90:7a:e8:ff:
6d:3b:e7:9c:38:30:da:a4:65:25:a6:00:61:74:cf:
e5:c9:08:da:1a:11:85:33:3c:11:7a:36:a4:b3:fa:
72:88:13:b8:f7:4e:a1:90:26:e0:0f:b6:35:3c:ad:
4e:3e:6d:57:8d:49:61:4e:7b:8e:63:40:fc:83:af:
5a:3c:c7:77:43:91:2f:9b:9a:d1:85:4d:73:7e:1e:
64:e8:03:61:65:48:4c:1d:9e:40:41:3d:03:8c:31:
e3:0e:4e:8c:d5:aa:a2:56:8b:48:07:88:a6:88:bd:
36:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8C:6C:1F:CF:FC:66:FE:4C:18:A1:10:A6:9D:AA:B2:BF:F9:37:8B
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/lYxsH8_8Zv5MGKEQpp2qsr_5N4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.113.0/24
31.56.154.0/24
31.56.158.0/23
31.56.168.0/22
31.56.174.0/23
31.57.24.0/21
31.57.48.0/20
31.57.105.0-31.57.109.255
31.58.34.0/23
31.58.212.0/22
217.60.0.0/21
217.60.12.0/22
217.60.24.0/22
217.60.36.0/22
217.60.56.0/21
217.60.188.0-217.60.195.255
Signature Algorithm: sha256WithRSAEncryption
26:13:ee:1a:64:0b:ad:d3:9e:b2:40:bc:fe:4e:e6:3d:33:22:
56:5c:8d:af:d8:3d:0c:86:ff:df:29:07:20:19:f1:c8:a1:47:
93:4b:32:b3:b6:ef:f2:c9:bc:fc:96:b2:8f:4d:72:18:c7:48:
25:6a:d6:30:b2:a8:c0:8f:fc:e2:62:91:7b:de:68:a3:57:39:
ad:85:48:70:a8:08:17:f5:af:b2:eb:c3:2d:1b:6e:bf:c7:45:
a4:f0:f2:f8:37:bd:6e:59:25:1e:69:7c:bc:2e:a6:5e:dc:bf:
56:06:23:b5:0f:93:28:e1:df:fc:01:c1:2d:63:3d:b0:0c:82:
34:4e:a2:ba:6b:97:21:a5:9b:1e:e5:1a:dc:cb:5a:31:8f:6d:
ea:04:7d:40:48:34:99:3a:2d:9b:a1:8d:db:9c:ab:ff:57:19:
e3:ad:46:cb:58:a5:d7:b7:de:d5:cc:b0:eb:80:1a:38:34:ff:
b0:8c:7f:09:38:55:9f:a1:06:c7:bc:ca:eb:2d:9f:58:21:03:
67:d4:e6:1b:6d:8c:78:c4:c1:cf:92:54:ae:eb:ce:65:2e:6d:
26:86:2a:54:50:a0:22:45:02:87:90:41:bc:d8:5c:f9:3b:55:
f5:35:0e:f4:6e:5c:94:fc:08:31:4d:64:fb:8c:a8:14:b9:e6:
5b:7f:4f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:29:03 2025 by rpki-client